BaselineWatch
Desk

CVE-2026-43679

2.4 low SSVC exploitation: none Analyzed

This issue was addressed with improved permissions checking. This issue is fixed in watchOS 26.4. An attacker with physical access to a locked Apple Watch may be able to view user contacts.

Fix

Patch, vendor advisory and mitigation references on NVD 1

Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.

Change history 1

  1. First seenCVSS 2.4 · appleNVD modified 2026-10-18 20:10

Affected (CPE criteria) 1

  • cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*

References 1